Re: [Lightning-dev] AMP: Atomic Multi-Path Payments over Lightning

2018-02-13 Thread Rusty Russell
Conner Fromknecht writes: > IMHO, the current signed invoice + preimage is a very weak proof of payment. > It's the hash equivalent to proving you own a public key by publishing the > secret key. There is an assumption that the only way someone could get that >

Re: [Lightning-dev] Proof of payment (Re: AMP: Atomic Multi-Path Payments over Lightning)

2018-02-13 Thread ZmnSCPxj via Lightning-dev
Good morning Corne and Conner, Ignoring the practical matters that Corne rightly brings up, I think, it is possible to use ZKCP to provide a "stronger" proof-of-payment in the sense that Conner is asking for. All that is needed is to create a message (possibly in some standard language)

[Lightning-dev] Proof of payment (Re: AMP: Atomic Multi-Path Payments over Lightning)

2018-02-13 Thread Corné Plooy via Lightning-dev
Hi Conner, I do believe proof of payment is an important feature to have, especially for the use case of a payer/payee pair that doesn't completely trust each other, but does have the possibility to go to court. However, I'm not convinced by what you wrote. I do think a combination of signed